Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft (raw, json)
Hash identifier: 03GGLmk4v24WNniqOb1tqxdB3Q1fLh4g9lc4fwamYd0=
Subject key identifier: B6:37:62:54:BC:8A:4B:53:58:2E:2A:CE:50:5C:71:84:1A:44:59:5B
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial: 019D37F7224C746E5A11FD789A3918F2E7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:36 +0000
Manifest this update: Sun 29 Mar 2026 05:00:36 +0000
Manifest next update: Mon 30 Mar 2026 05:00:36 +0000
Files and hashes: 1: Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl (hash: irxEKTaH0XDxoMGVWeAqw5Nusffa1EoghBqzZE9JBys=)
2: eIeriWh_mMm8_RuNws4nkC-T7Ks.roa (hash: nkYOaP08jdtxIPJ51r8XY78drY5LBTKGpsUvu+BLGMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:22:4c:74:6e:5a:11:fd:78:9a:39:18:f2:e7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Validity
Not Before: Mar 29 05:00:36 2026 GMT
Not After : Mar 30 05:00:36 2026 GMT
Subject: CN=b6376254bc8a4b53582e2ace505c71841a44595b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:10:1c:31:75:34:6a:49:1d:76:a6:60:27:
4d:b4:df:09:59:94:bd:41:32:97:6d:c9:f0:ca:ba:
57:34:d6:e0:a8:37:1f:f9:1a:70:63:b3:93:c2:42:
5f:af:2a:c4:22:7a:8e:ac:16:16:1b:58:5a:23:65:
9b:a4:a5:ec:d1:a7:18:36:1d:12:1a:a2:d8:57:ea:
7d:25:dd:39:fa:6e:6b:2f:ac:4b:ed:4c:20:12:67:
5e:ad:a9:aa:99:72:57:fe:76:23:65:d8:72:7b:e5:
af:84:e7:5b:2d:6d:75:aa:4d:c0:d7:d3:b4:ad:2e:
ec:71:51:d9:18:50:a5:4b:24:03:d4:70:bf:cd:35:
24:db:7d:19:41:9e:70:d2:90:c6:72:a1:2b:13:22:
32:3e:f3:f2:3b:a3:be:b0:9e:2e:84:80:8f:4d:b3:
dd:42:c9:06:26:2a:83:d0:44:59:68:4c:82:d9:21:
3c:d8:b0:90:ea:cc:36:c2:da:2a:14:0a:84:16:d2:
73:0d:7d:86:40:7b:65:19:a6:6f:ea:9e:de:92:09:
3f:b1:00:ed:44:fe:43:1f:5d:75:ac:18:e8:e3:3e:
ba:e2:84:4c:bd:8a:ea:65:aa:26:d6:7f:8a:40:80:
8d:e1:86:41:bd:e8:5b:0c:d8:51:f1:06:06:15:fa:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:37:62:54:BC:8A:4B:53:58:2E:2A:CE:50:5C:71:84:1A:44:59:5B
X509v3 Authority Key Identifier:
keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:84:c7:77:3c:06:e3:17:2e:20:01:5a:0f:c2:0d:dd:5f:c4:
e3:f1:99:57:6b:72:57:32:5b:96:0a:76:e5:42:68:7f:d2:a1:
11:2c:fc:90:a5:53:db:b8:fd:d5:a5:18:5e:cd:43:cd:1c:86:
be:28:63:1a:29:47:a0:dc:53:c6:10:2e:1a:a7:20:4f:db:5a:
21:d9:06:5b:25:f1:dd:6a:fd:5e:a8:55:ff:f9:e4:27:3f:b7:
b6:0c:8b:66:35:ee:cf:6a:43:14:09:18:4e:49:9e:6e:41:4c:
db:4e:da:38:0c:e4:35:e1:b8:ec:ad:8e:7b:30:91:8e:12:f8:
b8:be:cb:e5:0e:6f:5d:9e:ba:27:6d:e5:54:55:89:08:47:9f:
93:96:35:62:d6:2d:72:a0:5c:61:6a:ef:84:77:01:a5:15:cc:
21:50:88:ea:bf:a0:99:52:ac:4f:29:d6:71:9b:0b:41:5b:58:
64:9d:2a:80:08:b0:28:45:43:6d:95:ce:2a:14:e2:78:c0:c4:
81:23:94:71:15:b4:ad:8d:22:04:ee:03:26:9c:5f:b2:d9:c2:
f8:44:3c:86:18:8a:17:31:3e:79:5e:ff:df:22:2b:47:5c:08:
88:b0:eb:dc:f6:45:74:d7:60:1f:37:ca:60:94:e1:4b:50:41:
3e:8a:35:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:10 2026 by rpki-client